Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/pOAHo_xz8DPS-PlS6NdmOeIWwMQ.roa
File: pOAHo_xz8DPS-PlS6NdmOeIWwMQ.roa (raw, json)
Hash identifier: 19j4bFy6Qzt1lfA2YhipAm48g4iEQA4VOYkVWjiA/os=
Subject key identifier: A4:E0:07:A3:FC:73:F0:33:D2:F8:F9:52:E8:D7:66:39:E2:16:C0:C4
Certificate issuer: /CN=c12ac9b14fd261a8d2763aad417432bebc49a0d6
Certificate serial: 019426D9DED67E0DBD425B85F86075800E39
Authority key identifier: C1:2A:C9:B1:4F:D2:61:A8:D2:76:3A:AD:41:74:32:BE:BC:49:A0:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wSrJsU_SYajSdjqtQXQyvrxJoNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/pOAHo_xz8DPS-PlS6NdmOeIWwMQ.roa
Signing time: Thu 02 Jan 2025 11:49:59 +0000
ROA not before: Thu 02 Jan 2025 11:49:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206706
IP address blocks: 45.143.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:de:d6:7e:0d:bd:42:5b:85:f8:60:75:80:0e:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c12ac9b14fd261a8d2763aad417432bebc49a0d6
Validity
Not Before: Jan 2 11:49:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a4e007a3fc73f033d2f8f952e8d76639e216c0c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:ce:bb:b5:bb:3b:b9:fb:25:7e:eb:dd:e0:bc:
15:77:f8:81:34:dd:17:bc:c9:22:2c:6f:41:e7:74:
f6:25:3a:10:37:2b:46:fc:de:df:2a:dc:2e:48:8d:
01:f8:3c:a6:d7:6f:32:d1:ea:e7:3a:d6:c1:2b:93:
6b:6b:7a:83:39:94:5c:82:b3:eb:93:60:8a:93:2e:
65:d8:7e:f0:8a:0d:44:50:fb:c6:05:30:b8:cb:f5:
62:70:db:b4:a5:90:12:f7:35:b2:49:b4:50:c7:68:
a8:52:27:a4:53:0f:f9:e1:76:b7:87:81:de:c9:18:
07:e8:0d:ec:7f:e2:90:c6:b9:e1:a3:8e:10:f6:88:
fe:55:f1:49:25:a0:98:76:ca:de:84:57:e7:fd:ef:
5c:05:40:0d:97:75:12:28:9c:72:ea:c0:44:5e:ea:
9f:43:3b:73:dd:8c:dd:fd:66:39:3c:f3:3f:6c:eb:
20:4d:6c:5a:11:68:0b:68:88:5d:11:aa:74:ce:b7:
d9:ec:97:a3:c7:31:02:1e:d8:e3:09:59:80:fd:53:
99:8a:a1:22:92:82:13:e1:87:fb:2b:62:e6:25:46:
2d:80:81:6d:e0:ca:5a:59:12:6a:87:df:d9:8c:96:
39:b0:38:0e:dd:e7:47:62:12:29:d7:cb:b0:aa:a0:
1a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:E0:07:A3:FC:73:F0:33:D2:F8:F9:52:E8:D7:66:39:E2:16:C0:C4
X509v3 Authority Key Identifier:
keyid:C1:2A:C9:B1:4F:D2:61:A8:D2:76:3A:AD:41:74:32:BE:BC:49:A0:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSrJsU_SYajSdjqtQXQyvrxJoNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/pOAHo_xz8DPS-PlS6NdmOeIWwMQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.31.0/24
Signature Algorithm: sha256WithRSAEncryption
af:b1:a5:d6:ef:50:16:4c:5d:f4:7c:cd:69:c5:09:cb:c6:cc:
f2:e7:6e:13:60:cb:25:92:4e:48:64:62:cc:59:18:c3:24:7d:
4b:25:a4:80:4a:a1:d8:97:af:27:01:ba:21:34:89:ec:f3:e6:
44:66:22:b6:38:96:10:21:ae:8e:e7:e4:e0:b1:9e:84:f7:1a:
da:a1:2c:6f:c6:da:c6:73:08:31:f1:ad:d6:4c:40:a0:d7:4b:
99:8a:7c:19:9b:21:a0:71:f6:76:d7:a3:64:7c:32:5d:72:57:
22:48:ef:d9:42:d2:60:7e:72:68:0b:17:5e:9e:18:ab:bf:a2:
3e:95:a1:81:22:f6:e6:3e:6a:ae:6a:5b:5d:a4:0d:4b:96:90:
08:5b:75:8a:39:b4:b2:a0:88:ba:65:b6:37:29:17:b7:a4:b0:
cb:0e:d4:f0:7d:13:35:0f:f9:9c:28:4d:c8:02:dc:69:d7:1e:
fa:7f:23:48:9b:e6:d8:d9:5d:a1:3c:46:45:f2:4d:3a:6c:4d:
ad:fa:39:cc:26:fb:58:16:ae:5a:bb:e0:28:e8:e4:cf:1e:70:
26:8c:6a:13:9c:ec:7f:41:43:45:62:46:6c:04:8f:d2:c0:74:
fa:6f:e1:a4:a1:e5:de:42:d1:89:a4:3a:0c:a3:fe:14:3d:4c:
3f:8e:6a:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:31 2025 by rpki-client on console.sobornost.net